Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/uRUyvoWUUI0u6VgTrYOpV8_raPU.roa
File: uRUyvoWUUI0u6VgTrYOpV8_raPU.roa (raw, json)
Hash identifier: tKgHV1ni91xZwqw9Nvcot2Mrdv4NEq6c1hlY/WnqGJ0=
Subject key identifier: B9:15:32:BE:85:94:50:8D:2E:E9:58:13:AD:83:A9:57:CF:EB:68:F5
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018A6E3F432ED61F9DC3C24631688CA6F1A8
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/uRUyvoWUUI0u6VgTrYOpV8_raPU.roa
Signing time: Thu 07 Sep 2023 06:05:54 +0000
ROA not before: Thu 07 Sep 2023 06:05:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:6e3d:d85c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6e:3f:43:2e:d6:1f:9d:c3:c2:46:31:68:8c:a6:f1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 7 06:05:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b91532be8594508d2ee95813ad83a957cfeb68f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:37:95:52:9c:d0:1f:6f:0e:88:53:2f:44:90:
9b:e3:e8:57:e3:54:fe:33:66:73:32:67:b9:a1:30:
e9:02:5e:b2:97:61:77:f5:2a:c1:19:38:29:bd:57:
91:70:c7:7a:14:24:7b:ff:28:49:da:30:7a:ae:f0:
2d:65:b2:bb:12:df:7e:67:15:54:52:c4:7c:1e:42:
47:a2:b0:70:a3:5f:57:4b:fc:9d:e1:6e:46:4f:76:
d9:0a:5f:31:a7:e0:48:63:3d:02:5d:0c:5e:a2:56:
c9:2b:5a:b6:fa:97:38:92:9e:72:99:e2:cf:23:c8:
ce:31:d8:2a:17:a6:b3:52:c0:b5:7e:4e:f5:22:0a:
53:2e:dd:ba:71:d0:67:a3:ca:b7:03:3c:9e:63:fa:
b5:c8:2c:75:ba:7f:40:a9:59:b1:16:59:96:55:0f:
33:bf:c6:db:a4:f6:c5:7f:30:77:32:2d:08:9a:a0:
ba:94:93:3d:31:c5:39:8c:71:c9:29:f4:31:af:d9:
40:62:ac:00:9a:2a:c9:83:25:61:3a:e7:4e:d5:bb:
74:1f:5b:66:b4:22:e5:40:42:89:62:16:93:94:f5:
c4:14:d6:f2:53:f1:f0:af:5c:d2:87:1e:d9:52:19:
7f:3d:93:f2:90:50:59:6f:0d:92:3a:62:a1:2d:1e:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:15:32:BE:85:94:50:8D:2E:E9:58:13:AD:83:A9:57:CF:EB:68:F5
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/uRUyvoWUUI0u6VgTrYOpV8_raPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:91:f3:03:6b:81:86:19:b9:d2:66:80:c9:88:7d:7f:db:fa:
de:77:3b:3b:60:3b:56:ab:2d:d3:26:0e:9d:48:64:46:a4:e8:
2e:38:b2:19:b6:81:75:13:d6:34:5e:1a:7b:00:82:f6:cf:0e:
e5:c1:9b:02:8f:8d:ac:48:54:05:81:0b:3c:c7:e4:2e:3d:57:
80:af:9d:53:01:0c:54:38:fd:ce:5f:57:41:4a:52:b7:15:a7:
b3:19:3a:66:f5:b8:8f:fc:c4:fe:aa:6d:ee:ea:ed:9b:a0:c9:
4a:35:cc:f7:2c:0d:54:29:7f:c6:37:85:29:b5:08:37:b2:45:
13:f8:d2:38:ad:22:2f:30:ff:a5:c8:20:eb:84:b4:ae:e3:a9:
f1:86:52:58:cb:5a:61:69:a7:ab:95:10:8c:c3:f9:a4:f0:5e:
85:86:b6:a5:84:44:46:b5:5a:d7:01:45:62:a2:0b:b9:ad:62:
26:8b:f8:47:74:a4:ac:8e:d4:a8:07:c1:3d:ee:4d:8f:6c:af:
f5:e2:f0:dc:a3:0b:57:97:e6:94:fc:da:53:8c:b8:92:4a:85:
77:cb:0f:9c:c8:f7:87:81:2f:57:11:01:09:67:34:53:3c:68:
89:f4:f9:46:55:f7:01:9a:99:f6:a6:c9:8d:6e:6a:bd:c5:7b:
28:5a:41:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:52:09 2025 by rpki-client